About This Notice

This notice governs how InspireHUB collects and uses personal information in connection with its corporate website (inspirehub.com), marketing activities, sales enquiries, and client relationships. It applies to website visitors, prospective clients, existing clients, and business contacts.

Section 1

Who We Are

InspireHUB is operated through a group of related legal entities. Gloo, LLC — itself a wholly owned subsidiary of Gloo Holdings Inc. — is the direct parent of all InspireHUB entities listed below:

Section 2

Personal Information We Collect

When you interact with InspireHUB as a website visitor, prospective client, or existing client, the personal information we collect is generally limited to:

• your name and job title;
• business contact details — email address, telephone number, and postal address;
• the name and nature of your organisation;
• payment and billing details, where you or your organisation subscribe to our services; and
• other information you share with us in the course of our relationship.

We do not collect sensitive personal information — such as health data, financial account credentials, or government-issued identification — in connection with our corporate relationships.

Section 3

How We Use Your Personal Information

3.1 Content Channel Notifications

InspireHUB operates its own corporate website using the IHUBApp platform. As part of that experience, we publish content channels — similar to topic-based blogs or update feeds — that visitors may join to receive notifications and alerts, and unjoin at any time. When you join one of our content channels, we use your contact details to deliver the notifications associated with that channel. You may unjoin a channel at any time through your account settings. Notifications for that channel will cease immediately. If you need assistance managing your channel memberships, please contact us at privacy@inspirehub.com.

3.2 Enquiries

When you contact us with an enquiry or request, we use the information you provide to:

• respond to and manage your enquiry;
• provide information about InspireHUB, the IHUBApp platform, and our related services; and
• communicate with you in connection with that enquiry and any related follow-up.

If you object to us using your information in this way, please let us know. We may not be able to respond to or progress your enquiry as a result.

3.3 Marketing and Outreach

We may use your business contact details — obtained directly from you, or from publicly available sources such as LinkedIn, corporate websites, or business directories — to contact you with information about InspireHUB and the IHUBApp platform.

All marketing communications to Canadian recipients are sent in compliance with Canada's Anti-Spam Legislation (CASL). We send commercial electronic messages only where we have express or implied consent to do so, and every communication includes a functional unsubscribe mechanism. If you do not wish to receive marketing communications from us, please let us know by emailing privacy@inspirehub.com or by following the opt-out instructions in any marketing communication we send you. We will honour your request promptly.

3.4 Client Onboarding and Licensing

When you or your organisation license the IHUBApp or purchase our services, we use your personal information to:

• complete the order and agree to pricing;
• execute licensing and service agreement documentation; and
• set up and manage your account.

3.5 Service Delivery

Where you or your organisation engage InspireHUB to provide services, we use personal information you provide to:

• deliver those services in accordance with our contract with you;
• manage our relationship and ensure our mutual obligations are met; and
• conduct and manage our business and enforce or protect our legal rights.

3.6 Subscription Payments

Subscription payments for InspireHUB services are processed by Stripe, Inc., our third-party payment processor. When you or your organisation purchase a subscription, Stripe collects and processes your payment card details directly. InspireHUB does not store full payment card numbers. The billing information we retain is limited to:

• cardholder name, email address, and phone number;
• masked card number (e.g., xxxx‑xxxx‑xxxx‑1234); and
• card expiration date and billing address.

This information is retained solely for subscription management purposes. Stripe operates under its own privacy policy, available at stripe.com/privacy. Stripe is certified to PCI DSS Level 1.

3.7 Anonymised Data and Machine Learning

Section 4

Lawful Basis for Processing

We only use your personal information where it is lawful to do so. The applicable basis depends on your jurisdiction.

Section 5

Cross-Border Transfers of Personal Information

InspireHUB's operations span three jurisdictions. Your personal information may be processed in a jurisdiction other than the one in which it was collected. Specifically:

• InspireHUB Canada Holdings Inc. employs the staff who support operations across all three regions. Personal information relating to US-instance and Australian-instance clients and contacts may be accessed and processed by Canadian employees in the course of providing services.
• InspireHUB Australia Pty Ltd hosts Australian-instance server infrastructure. Personal information relating to Australian contacts is stored on Australian servers but may be accessed by Canadian staff as described above.
• Stripe, Inc., our payment processor, is incorporated in the United States and processes payment transaction data under its own privacy policy and PCI DSS certification.

Under PIPEDA, Canadian law continues to apply to personal information processed by InspireHUB Canada Holdings Inc., regardless of where the underlying data is stored. InspireHUB maintains contractual safeguards with its sub-processors to ensure personal information transferred outside Canada receives comparable protection. InspireHUB will provide no less than 30 days' prior written notice of any proposed addition or replacement of a sub-processor. The current sub-processor list is maintained in the Data Processing Agreement.

In respect of Australian contacts, InspireHUB Australia Pty Ltd takes reasonable steps, through contractual obligations imposed on InspireHUB Canada Holdings Inc., to ensure that Canadian staff who access Australian personal information provide privacy protection comparable to that required under the Australian Privacy Principles.

Section 6

Third Parties Who Receive Your Information

Personal information may be shared within the InspireHUB group of companies — including Gloo, LLC as our parent entity and InspireHUB Australia Pty Ltd as a related entity — for internal governance, security oversight, and operational support purposes. This is a data sharing arrangement within our own corporate group, not a disclosure to an independent third party, and is governed by our corporate structure and internal data handling obligations.

In addition, to operate our business and deliver our services, we share personal information with the following external third parties:

• Stripe, Inc. — payment processing for subscriptions (see Section 3.6);
• CRM and marketing automation platforms — used to manage client and prospect relationships and deliver communications;
• Microsoft Azure (Microsoft Corporation) — cloud infrastructure, hosting, data storage, and compute, with data residency in the applicable regional instance;
• Cloudflare, Inc. — content delivery, DDoS protection, and web application firewall services. Both Microsoft Azure and Cloudflare are bound by data processing agreements consistent with applicable privacy law;
• Email and notification delivery providers — including SendGrid (Twilio Inc.) for transactional and notification email delivery, and Twilio Inc. for push notification delivery. These providers process email addresses and notification content only as necessary for delivery; and
• Professional advisers — including legal, accounting, and insurance advisers, bound by professional confidentiality obligations.

These parties are permitted to use personal information only as necessary to provide their services to us or to support our delivery of services to you. We do not sell, rent, or trade personal information to third parties for their own marketing purposes.

We may also disclose personal information where required by law, court order, or regulatory obligation; where necessary to protect the rights, property, or safety of InspireHUB, its clients, or others; or in connection with a merger, acquisition, or sale of all or part of our business, provided that the receiving party agrees to handle your personal information in a manner consistent with this notice.

Section 7

Cookies and Tracking Technologies

InspireHUB uses cookies and similar tracking technologies on inspirehub.com to improve your experience, remember your preferences, and understand how our website is used. The third-party tools we currently deploy on our corporate website are:

• Google Analytics — collects anonymised usage and behavioural data to help us understand how visitors interact with our website. Data is subject to Google's Privacy Policy at policies.google.com/privacy.
• Meta Pixel — collects behavioural data on our marketing properties to measure advertising effectiveness. Data is subject to Meta's Privacy Policy at facebook.com/privacy/policy.

You can manage or disable cookies at any time through your browser settings. Disabling certain cookies may affect the functionality of some website features.

Section 8

How Long We Keep Your Information

We retain personal information only for as long as necessary for the purpose for which it was collected, or as required by applicable law. Our retention periods by category are:

Where a legal obligation requires us to retain personal information for a longer period, we will retain it for the period required by that obligation.

Section 9

How We Protect Your Information

InspireHUB uses administrative, technical, and physical safeguards to protect personal information in compliance with legal requirements. These include role-based access controls, encryption of data in transit using TLS 1.2 or higher and at rest using AES-256 or equivalent encryption, multi-factor authentication for staff accessing operational systems, and documented incident response procedures. InspireHUB's security practices are designed with reference to industry-recognised frameworks, including the NIST Cybersecurity Framework and ISO/IEC 27001. InspireHUB does not hold these certifications and makes no claim of compliance with them. Security governance is overseen at the Gloo Holdings, Inc. enterprise level.

InspireHUB Canada Holdings Inc. manages day-to-day security operations across all regional instances, with material security incidents subject to escalation and review by the Gloo Holdings, Inc. governance oversight committee.

No method of internet or email transmission is completely secure, and no security system is impenetrable. While we take reasonable steps to protect your personal information, we cannot guarantee absolute security.

Section 10

Security Incidents and Breach Notification

In the event of a security incident that affects your personal information, InspireHUB will notify you promptly upon determining that the incident has affected or is reasonably likely to have affected your information.

Where required by applicable law, we will also notify the relevant privacy regulator:

• Canada: The Office of the Privacy Commissioner of Canada will be notified where an incident creates a real risk of significant harm, as required by PIPEDA. Notification will occur as soon as feasible after determining that the breach creates a real risk of significant harm, consistent with our obligations under PIPEDA.
• Australia: The Office of the Australian Information Commissioner will be notified under the Notifiable Data Breaches scheme within 30 days of confirming an eligible data breach, as required under the Privacy Act 1988 (Cth).
• United States: Applicable federal and state breach notification laws will be followed. Timelines vary by state; InspireHUB will comply with the requirements applicable to the affected individuals.

Breach response is managed centrally by InspireHUB Canada Holdings Inc. on behalf of all InspireHUB entities. Notification on behalf of InspireHUB Australia Pty Ltd will be made by the Canadian entity in its capacity as operational manager for that entity.

For full details on our breach response procedures, please refer to our Data Processing Agreement at inspirehub.com/dpa.

Section 11

Your Privacy Rights

Subject to applicable law, you have the right to:

• access the personal information we hold about you
• request correction of inaccurate or incomplete information
• request deletion of your personal information
• withdraw consent to the use of your personal information
• request that your personal information be provided to you in a portable format
• object to or restrict certain types of processing

The specific rights available to you depend on your jurisdiction. To exercise any of these rights, please contact us using the details in Section 13. We will respond within 30 days, subject to any legal requirements that may affect our ability to fulfil your request. We will notify you if that is the case.

You will need to provide sufficient information to verify your identity before we can process your request.

Section 12

Keeping Your Information Accurate

InspireHUB relies on you to ensure the personal information you provide is accurate, complete, and up to date. You may update your contact and account details at any time by contacting us at privacy@inspirehub.com.

Section 13

How to Contact Us

InspireHUB's Privacy Officer is responsible for the creation, oversight, and implementation of our privacy management program across all entities, and for receiving and responding to privacy-related questions and requests.

You may contact our Privacy Officer by email at privacy@inspirehub.com for all regions. For formal written correspondence, please use the address for your region:

Phone: 1‑855‑355‑4482

If our Privacy Officer is unable to resolve your concern, you may also contact the applicable privacy regulator:

• Canada: Office of the Privacy Commissioner of Canada — priv.gc.ca
• Australia: Office of the Australian Information Commissioner — oaic.gov.au
• United States (California): California Privacy Protection Agency — cppa.ca.gov

Section 14

Changes to This Notice

We may update this notice from time to time to reflect changes in our information practices, our operations, or applicable law. We will not reduce your privacy rights under this notice without your explicit consent.

If we make significant changes, we will post the updated notice on this page and, where appropriate, notify affected individuals directly by email. The "Effective Date" at the top of this notice indicates when it was last revised. We encourage you to review this notice periodically.

Prior versions of this notice are available upon request by contacting privacy@inspirehub.com.